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Abstract 

An almost perfect nonlinear (APN) function (necessarily a polynomial 
function) on a finite field F is called exceptional APN, if it is also APN on 
infinitely many extensions of F. In this article we consider the most studied 
case of F = F21. A conjecture of Janwa- Wilson and McGuire- Janwa- Wilson 
(1993/1996), settled in 2011, was that the only exceptional monomial APN 
functions are the monomials x", where ri = 2* + 1 or n = 2^* — 2* + 1 (the 
Gold or the Kasami exponents respectively). A subsequent conjecture states 
that any exceptional APN function is one of the monomials just described. 
One of our result is that all functions of the form f{x) = x"^ + h{x) (for 
any odd degree h{x), with a mild condition in few cases), are not exceptional 
APN, extending substantially several recent results towards the resolution of 
the stated conjecture. 

1 Introduction 

Definition 1. Let L = Fg, with q = for some positive integer n. A 
function / : L — )■ L is said to be almost perfect nonfinear (APN) on L if 
for all a,b E L, a ^ 0, the equation 

f{x + a)~f{x) = b (1) 

has at most 2 solutions. 
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Equivalently, / is APN if the cardinality of the set {f{x + a)—f{x) : x e 
L} is at least 2"~^ for each a & L*. These kind of functions are important in 
applications to cryptography, where they are used as S-Boxes, because they 
are resistant to differential cryptanalytic attacks. The best known examples 
of APN functions are the Gold function f{x) = and the Kasami- Welch 

function/(a;) = x^ ~^ that are APN on any field ¥2^^, where k and n are 
relatively prime. The Welch function f{x) — x^'^"'"^ is also APN on F2n, where 
?7, = 2r + 1. 

The APN property is invariant under some transformations of functions. 
A function / : L — > L is linear if and only if / is a linearized polynomial over 
L, that is, 



The sum of a linear function and a constant is called an affine function. 
Two functions are called extended affine equivalent (EA equivalence), f = g 
(EA), if / = Ai o g o A2 + A, where Ai and A2 are linear maps and A 
is a constant function. A second equivalence is the CCZ equivalence, / = 
g{CCZ) if the graph of / can be obtained from the graph of g by an affine 
permutation. EA equivalence is a particular case of CCZ equivalence; two 
CCZ equivalent functions preserve the APN property (for more details see 
[5]). In general, CCZ equivalence is very difficult to establish. 

Until 2006, the list of known affine inequivalent APN functions on L = 
GF(2") was rather short; the list consisted only of monomial functions of the 
form f[x) — x*, for some positive integer t. In February 2006, Y. Edel, G. 
Kyureghyan and A. Pott [6] established (by an exhaustive search) the first 
example of an APN function not equivalent to any of the known monomial 
APN functions. Their example is 



where u G wGF{2^)* U w'^GF{2^)* and w has order 3, is APN on GF{2^'^). 
Since then, several new infinite families of polynomial APN functions have 
been discovered. 

2 Exceptional APN functions 

In this section we discuss the main conjecture on exceptional APN functions. 
An almost perfect nonlinear (APN) function (necessarily a polynomial func- 



n-l 




i=0 



x^ + ux^^ e GF{2^^)[x] 
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tion) on a finite field F is called exceptional APN, if it is also APN on 
infinitely many extensions of F. In this article we consider the most studied 
case of F = F2n. A conjecture of Janwa- Wilson and McGuire-Janwa- Wilson 
(1993/1996), settled in 2011, was that the only exceptional monomial APN 
functions are the monomials x", where n = 2*+l or = 2^* — 2* + 1 (the Gold 
or the Kasami exponents respectively). The Welch functions f{x) = a;^^^^ 
are known to be APN on for n = 2r + 1, but they are not exceptional 
APN functions. The same is the case for the new class of APN functions 
discovered by Edel et. in [6|, discussed earlier. Since then several have been 
proved (see section [3l establishing that many infinite classes of functions are 
not exceptional APN functions (see p^, [2], [H], [12], [13], and others.) 
Based on these results, an open conjecture states that any exceptional APN 
function is one of the monomials just described. 

Our theorems [7] and |8] in section [5] demonstrate that all functions of the 
form f{x) = + h{x) (for any odd degree h{x), with a mild condition in 

few cases), are not exceptional APN, extending substantially several recent 
results towards the resolution of the stated conjecture. 

Definition 2. Let L = ¥q, with q = for some positive integer n. A 
function / : L — )• L is called exceptional APN if / is APN on L and also 
on infinitely many extensions of L. 

Aubry, McGuire and Rodier [1] made the following conjecture. 
CONJECTURE: Up to equivalence, the Gold and Kasami- Welch func- 
tions are the only exceptional APN functions. 

Proposition 1 (Rodier [12]). Let L = ¥g, with g = 2". A function f : L L 
is APN if and only if the affine surface X with equation 

f(x) + fiy) + f{z) + f{x + y + z) = Q 

has all its rational points contained in the surface {x + y){x + z){y + z) = 0. 

Using this characterization and the bounds of Lang- Weil and Ghorpade- 
Lachaud that guarantee many rational points on a surface for all n sufficiently 
large, one can prove the following theorem. 

Theorem 1 (See Rodier [12]). Let f : L ^ L, L = ¥2^, a polynomial 
function of degree d. Suppose the surface X 
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f{x) + fiy) + f{z) + f{x + y + z) ^ 
{x + y){x + z){y + z) 

is absolutely irreducible (or has an absolutely irreducible component over L), 
then f is not an exceptional APN function. 

From now on, we let 

^ fix) + fiy) + fiz) + fix + y + z) 
(pix, y, z) = — ■ — -- — ■ — -- — — 2) 

[x + y){x + z){y + z) 

x^ + y^ + z^ + {x + y + zY 
(pj{x, y, z) = — - — ■ — - — ■ — - — ■ — - — (3) 
[x + y){x + z){y + z) 

3 Recent results 

Aubry, McGuire and Rodier [Ij proved the following result that provides 
infinite families of polynomial functions that are not exceptional APN. As 
before, let L = ¥q, with q = 2"^ and f : L ^ L a polynomial function. 

Theorem 2. // the degree of f is odd and not a Gold or a Kasami-Welch 
number, then f is not APN for all sufficiently large extensions of L. 

For the even degree case, they proved the following: 

Theorem 3. // the degree of f is 2e with e odd, and if f contains an odd 
degree term, then f is not APN for all sufficiently large extensions of L. 

Theorem 4. // the degree of f is 4e with e > 7 and e = 3 (mod 4), then f 
is not APN for all sufficiently large extensions of L. 

They also found results for Gold degree polynomials. 

Theorem 5. Suppose f{x) = x^^^^ + g{x), where deg((7) < 2^^^ + 1. Let 

fl'(^) — Yl^i=Q^^ '^i'^^ ■ Suppose that there exists a nonzero coefficient of 
g such that (pj{x,y,z) is absolutely irreducible. Then (f){x,y,z) is absolutely 
irreducible and f is not exceptional APN. 

In this last theorem the authors showed that the bound deg{g) < 2^~^ + 1 
is best possible, in the sense that there is an example with (\.eg{g) = 2^^^ + 2 
where (j){x,y,z) is not absolutely irreducible [12]. 
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4 Large Classes of Gold degree families that 
are not exceptional APN 

In this section we will state and prove several results that provide families of 
Gold degree polynomials that are not exceptional APN. We will accomplish 
this by proving that the surface (p{x, y,z) = related to the polynomial f{x) 
is absolutely irreducible. 

One of our result is that all functions of the form f{x) = + h{x) (for 
any odd degree h{x), with a mild condition in few cases), are not exceptional 
APN, extending substantially several recent results towards the resolution of 
the stated conjecture. 

We begin with the following facts, due to Janwa and Wilson [IQJ . about 
the Gold, Kasami- Welch and Welch functions. 

If f{x) = """^ is a Gold function, then 

<P{x,y,z)= Yl {x + ay + {a + l)z). (4) 

aeF^k -F2 

If f{x) = is a Kasami Welch function, then 

(p{x,y,z)= Yl Paix,y,z), (5) 

aeF2k-F2 

where Pa{x, y, z) is absolutely irreducible of degree 2^ + 1 over GF{2^). 

If f{x) = x^ is a Welch function, then (p{x,y,z) is absolutely irreducible 

for A; > 1. 

We will frequently use the following lemma. 

Lemma 1. For an integer A; > 1, let / = 2^^ + 1, m = 2^^^ — 2^^ + 1 and 
n = 2^^ + 3 be a Gold, Kasami- Welch and Welch numbers respectively. Then 
{4>i, (f^m) = 1, 0n) = 1 and {(j)m, (t>n) = 1- Also: 

a) If li = 2^^ + 1 and I2 = 2^'^ + 1 are different Gold numbers such that 
{h, h) = 1, then , (f)i.,) = 1. 

b) (0mi) 0m2) = 1 fo^^ different Kasami- Welch numbers rrii and 7712- 

c) {(pni, 4'n2) = 1 fo^^ different Welch numbers rii and n2. 

Proof. The proof of this lemma follows directly from (4), (5) and the fact 
that (pn, for a Welch number r?, > 5, is absolutely irreducible. □ 
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4.1 Overcoming the obstacle 

Theorem [5] shows that /(x) = x'^^'^^ + g{x) with deg((/) = 2^^^ + 1 provides 
an obstacle to absolute irreducibility. Now we will show that there are cases 
where it is possible to increase the degree of g{x) in order to obtain new 
non-exceptional APN functions. 

From now on, let L = ¥2", f : L L and (p{x, y, z), (j)j{x, y, z) as in (2) and 
(3). (The polynomial / can be considered not containing a constant term 
nor terms of degree power of two, since as we commented APN property is 
invariant under affine maps). 

Theorem 6. Fork > 2 and a 7^ 0, let f{x) = x'^^'^^ + ax'^''~^~^^ + h{x) G L[x], 

where h{x) = Yl'j=o ^j^'' ^'^^ satisfy one of the following conditions: 

a) = 0. 

b) There is a non zero aj(l)j for some j 7^ 5. 
Then y, z) is absolutely irreducible. 

Proof. If /c = 2, then /(x) = + h^x^ , and it is known that it is not 
exceptional APN [2]. 

If /c = 3, then f[x) = x^ + a^x'^ + a^x^ + a^x^, and it is known that it is not 
exceptional APN [12]. 

Let A; > 3 and let (fi{x, y,z) = be the surface corresponding to f{x). Suppose 
that is not absolutely irreducible, then (f){x,y,z) = P{x,y, z)Q{x,y, z), 
where P and Q are non-constant polynomials. We write P and Q as sums 
of homogeneous terms: 

2'=+! 

Y,cij(/)j{x,y,z) = {Ps + Ps-i + ... + Po){Qt + Qt~i + ■■■ + Qo), (6) 
i=3 

where Pj and Qj are zero or homogeneous of degree j, s + t = 2^ — 2. 
Assuming, without loss of generality, that s > t. Then, 

2^^ — 2 

2^^ - 2 > s > > t > 0. 

- 2 - 

In (6), 

PsQt = (t)2k+i, (7) 

since 02^+1 is equal to the product of different linear factors, Pg and Qt are 
relatively prime. 
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By the assumed degree of h{x), the homogeneous terms of degree r, for 
2^-1 < r < 2*^ — 2, are equal to zero. Then, equating the terms of degree 
s + t — 1 gives PsQt^i + Ps-iQt = 0. Hence, we have Pg divides Pg-iQt and 
this imphes that Pg divides Pg-i, since Pg and Qt are relatively prime. We 
conclude that Pg-i = as the degree of P^-i is less than the degree of Pg. 
Then, we also have Qt-i = as 7^ 0. 

Similarly, equating the terms of degree s + t — 2,s + t — 3,...,s + 2 we get: 

Ps-2 = Qt-2 = 0, 
Ps-3 = Qt-3 = 0, 

F,„(t_2) = Q2 = 0. 

The (simplified) equations of degree s + 1, s, s — 1 and s — 2, respectively, 
are: 

PgQl + Pg^{t-l)Qt = as+4^s+4 
PsQo + Ps-tQt = as+30s+3 
Ps-lQo + Ps-{t+l)Qt = Cts+30s+2 
Ps-2Qo + Ps- 

We consider two cases: 
FIRST CASE: s > 2^ 

For this case, t < 2^^^ —2. From the equations of degree s + 1 and s we have: 
PgQl + Pg-it-i)Qt = 0, then Pg-{t-i) = Qi = 0; PgQo + Pg-tQt = 0, then 
Pg-t = Qo = (using the same argument we used in the equation s + 1 — 1). 
Then, Q = Qt is homogeneous of degree t and by (7) and (6) there exist some 
a G — F2 such that x + ay + {1 + a)z divides both 02*=+! ciiid 02'=-i+3' 
contradicting lemma [T] 
SECOND CASE: 2^-^ >s> 2^-^ - 1. 

For this case, 2^^^ ~ 2 < t < 2^^^ — 1. Then, we have the subcases: 
SUBCASE 1: {s = t = 2^-^ - 1) 

We already have Pg_x = Qt-i = Ps-2 = Qt-2 = ••• = P2 = Q2 = 0. 
The equation of degree s + 1 is 

PsQl + PlQt = «0s+4. (8) 
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The equation of degree s is PgQo + PoQs = 0. Using the argument from the 
first case we get Pq = Qo = 0. For r < s, r ^ 5, the equation of degree < r 
is of the form = a^^r (since all Pi, Qi are zero except Pg, Qt and possibly 
Pi and Qi). Then, if for some j ^ 5, cij(^j ^ 0, we are done. If = 0, then 
the equation of degree two is PiQi = 0, so one of them is equal to zero. If 
Pi = 0, then the equation (8) becomes PgQi = a0s+4, contradiction since 
4>s+i = 02'=-i+3 is absolutely irreducible. The case Qi = is similar. 
SUBCASE 2: {s = 2^~\t = 2^-^ - 2) 

We already have F^-i = Qt-\ = Ps-2 = Qt-2 = ... = -P4 = Q2 = 0. 
The equation of degree s + 1 is PgQi + PsQt = 0, so P3 = Qi = 0. 
The equation of degree s is: 

PsQo + P2Qt = «0s+3- (9) 

The equation of degree s — 1 is PiQt = 0, then Pi = 0. 

The equation of degree s — 2 is PoQt = a^+i^s+i- If cLs+i 7^ 0, then Qt divides 
(ps+i = 02*-i+i) but Qt also divides 02^+1) and that is not possible by lemma 
[U Then, Us+i = and Pq = 0. 

For r < s — 2, r 7^ 5, the equations of degree < r have the form = a^^r- 
Then, if for some j 7^ 5, ajcpj ^ 0, we are done. If = 0, then the equation of 
degree two is P2Q0 = 0, so one of them is zero. If Qo = 0, then the equation 
(9) becomes P2Qt = a(f)s+3] contradiction to the irreducibility of <ps+3- If 
P2 = 0, then PgQo = tt</>s+3, but also PsQt = 02*+i'/'2fc+i! contradicting 
lemma [1] □ 

Some families covered by this theorem: 
f{x) = + aiix^^ + h{x), where an 7^ 0,deg(/i) < 9, except the case 
f{x) = x^"^ + aiix^^ + a^x^, an 7^ 0, 05 7^ 0; 

f{x) = x^^ + aigx^^ + h{x), where aig 7^ 0,deg(/i) < 17, except the case 
f{x) = x^^ + aigx^^ + a^x^, aig 7^ 0, 05 7^ 0. 

As we can notice in this theorem, we interpolate a Welch term ax"^ 
between the consecutive Gold terms """^ and x'^ of the family given in 
theorem [5l 

Including two or more terms would imply more cases and subcases to 
consider and this is not a good idea. Next, we provide more general families 
of Gold degree polynomials that cannot be exceptional APN. 



8 



4.2 Hyperplane Sections 

We first prove some results on plane sections. Let us consider the intersection 
of the surface (t){x, y, z) with the plane y — z. 

Lemma 2. Let (l)j{x,y,z) be as in (3). Then 

a) For n = 2^= + 1 > 3, 0„(a;, y, y) = {x + yf'-^; 

b) For n = 3 (mod 4) > 3, (j)n{x, y, y) — R{x, y) such that x -\- y does not 
divides R{x, y); 

c) For n = 1 (mod 4) > 5, (pni^, y, y) = {x + yY ~^S{x, y), such that x + y 
does not divides S{x,y), where n = 1 + 2'm, / > 2 and m > 1 is an odd 
number. 

Proof. The part a) follows directly from (4). For the part b) we have: 

+ + ^" + (x + y + z)" 



(l>n{x,y,z) 



{x + y){x + z){y + z) 



, , , 1 ,y'' + z" x"- + (x + y + z)'' . 

4>n{x,y,z) = — — ( ■ + ) 

[X + y){x + z) y + z y + z 

Then 

U^, y, z) = , J ?/"-^ + y^'-'z + ... + yz^-' + z^'^ 

[x + y)[x + z) 

+ x""^ + x""^(a; + y + z) + ... + x{x + y + z)"'^ + {x + y + ^)""^] 
Making y — z, we get: 

(t>n{x,y,y) = — ^ — 
{x + yY 

Since n = 3 (mod 4) > 3 then n = 3 + 4m for m > 1. Then 



4>n{x,y,y) 



^2+4m _|_ ^2+4m 



(x + yf 



A+2m _|_ ^,l+2m 

(l>n{x,y,z) = ( 



(X, 2/, ^) = {X^"" + X^'^-^y + ... + Xy^™-! + |/2m)2 
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Therefore, (j)n{x,y,y) = R{x,y). Now, x + y divides R{x,y) if and only if 
X + 1 divides x^™ + x^™"^ + x^™"^ + ... + x + 1, that is not true. 
For the part c), with y = z we get similarly: 

Since n = 1 + 2'm > 5, for m > 1 an odd integer: 



m.\2' 



{x + yY 

0„(x, 2;) = — — ■ — — 
[x + yY 

</.„(x, y, y) = (x + -2(x'"-i + x™-2^ + ... + xy^-^ + 

Then 0„(x, y, = (x + yY^^'^Six, y). Now, x + y divides S'(x, if and only 
if X + 1 divides x™"^^ + x'""^ + x™"^ + ... + x + 1 that is not true either. □ 



5 Our main results 

Now we prove our main results (Theorems [7] and [8] in this section) establishing 
that /(x) = x^ + h{x) (for any odd degree /i(x), with a mild condition in 
few cases), are not exceptional APN, extending substantially several recent 
results towards the resolution of the stated conjecture. In particular, these 
two theorems, in a large measure, extend the result of Aubrey, McGuire and 
Rodier [Ij as stated in Theorem |5] stated earlier. 

Theorem 7. For k > 2, let /(x) = x^''+^ + h{x) G L[x], where deg(/i) = 3 
(mod 4) < 2^ + 1. Then, (p{x,y,z) is absolutely irreducible. 

Proof. As in the previous theorem, for k = 2 and 3, we have the exceptional 
polynomials /(x) = x^ + ^sx^ and /(x) = x^ + ayx'^ + asx^ + asx^, respectively. 
Let k > 3 and let 0(x, y, z) be the function related to /(x). As before, suppose 
that (j){x,y,z) = P{x,y, z)Q{x,y, z), P and Q non-constants and writing P 
and Q as sums of homogeneous terms: 

2'=+! 

J] a>j(x,?y,z) = {Ps + Ps-i + ... + Po){Qt + Qt-i + - + Qo), (10) 

3=3 



10 



where s + t = 2^" — 2. Assuming that s >t, then 2^" — 2 > s > > t > 0. 
Let d = deg{h), e = 2^ + I - d. 
In (10), we have: 

PsQt = (t>2^ + l. (11) 

Since 02''+i is equal to the product of different hnear factors, we conclude 
that Ps and Qt are relatively prime. 

By the assumed degree of /i(x), the homogeneous terms of degree r, for 
(i — 3<r<2'^ — 2, are equal to zero. Then, equating the terms of degree 
s + t — 1 gives PsQt-i + Ps-iQt = 0. As in the previous theorems, we conclude 
that Ps-i = and Qt-i = 0. 

Similarly, equating the terms of degree s+t—2,s+t—3, s+t—{e—l) = d—2, 
we get: 

Ps-2 = Qt-2 = 0, 
Ps-3 = Qt-3 = 0, 

Ps-{e-l) = Qt-{e-l) = 0. 

The equation of degree d — 3 is: 

PsQt^e + Ps^eQt = adcpd (12) 

If Qt-e = 0, then we have Ps--eQt = CLd<t>d- But, from (11) we also have PsQt = 
02'=+! which is impossible by lemma [H The case Ps-e = is analogous. 
Then, suppose that Qt-e 7^ and Ps-e 7^ 0. We consider the intersection of 
(p{x, y, z) with the plane y = z. Using lemma |2l the equations (11) and (12) 
become: 

PsQt = ix + yf-' 

PsQt-e + Ps-eQt = (t>d{x,y). 

Therefore, {x + y) divides both P^ and Qt, so it divides (pd{x,y), contradiction 
to part b) of lemma [2l Therefore, (I) is absolutely irreducible. □ 

This theorem includes theorem [6] as a particular case. The next theorem 
is a version of theorem [7] for the case d = 1 (mod 4) with one additional 
condition. 

Theorem 8. Fork > 2, let f{x) = x^'°"'"^ + /i(x) G L[x] where d = deg{h)= 1 
(mod 4) < 2'^+l. //02'=+i) 'Pd o-f^^ relatively prime, then (p{x, y, z) is absolutely 
irreducible. 
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Proof. As we did before, suppose that y, z) = P{x, y, z)Q{x, y, z), then 

2'=+! 

J2 aj(l)j{x, y, z) = {Ps + + ... + Po){Qt + Qt-i + ... + Qo) (13) 

where s + 1 = 2^" - 2. Assuming that s >t, then 2^" - 2 > s > > t > 0. 
Let e = 2^= + 1 - d, then e > 2'. 
In (13), we have: 

PsQt = 02^ + 1 (14) 

since (^2*=+! is equal to the product of different hnear factors, P^ and Qt are 
relatively prime. 

By the assumed degree of h{x), the homogeneous terms of degree r, for 
d — 3<r<2'^ — 2, are equal to zero. Then, as in the previous theorems, 
equating the terms of degree s + t — l,s + t — 2,s + t — 3, d — 2 we get: 

Ps-l = Qt-l, Ps-2 = Qt-2 = 0, Ps-3 = Qt-3 = 0, Ps-(e-l) = Qt-{e-l) = 0. 

The equation of degree — 3 is: 

PsQt-e + Ps-eQt = ad(l)d (15) 

We consider two cases to prove the irreducibility of (p. 
First case {s > d — 3) 

Since s + 1 = 2'' — 2, then t < e. The equation (15) becomes Ps-eQt = 
But also PsQt = 02'=+! contradiction to the assumptions of the theorem. 
Second case [s < d — 3) 

For this case t > e. In the equation (15), if Qt-e = or Pg-e = we are 
done, as in theorem [71 In other case, if Qt-e 7^ and Pg-e 7^ 0, we consider 
the intersection of (f){x, y, z) with the plane y = z. Then, using lemma [2l the 
equations (14) and (15) become: 

PsQt = {x + yf~' 

PsQt-e + Ps-eQt = (Pd{x, y) 

where (j)d{x., y) = {x + y)'^'^'^S{x, y) and x + y does not divides S'(x, y). Since 
t > e > 2' then, from the first equation, {x + yY divides both Ps, Qt implying 
that (x + yY divides (f)d{x,y), that implies that x + y divides R{x,y), a 
contradiction. □ 
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6 Some Applications 



As a consequence of our Theorems [6l U\ and [HI and using results from Janwa 
and Wilson flO] and Janwa, McGuire and Wilson [9], we are able to prove 
the following result. 

Theorem 9. All polynomials of the form f{x) = x^^ + h{x) are not excep- 
tional APN for all odd degree polynomials h. 

We thus extend substantially the classification of all lower degree excep- 
tional APN functions given in literature. 

7 Open Problems and Future Directions 

Janwa, McGuire and Wilson [9] proved that, for t = 5 (mod 8) > 13, if the 
maximal cyclic code Bi (/ is its length) has no codewords of weight 4, then 
(j)t{x,y,z) is absolutely irreducible. For many values of / it is possible that 
Bi has no codewords of weight 4, for example, if / is a prime congruent to 
±3 (mod 8). For more details and infinite classes, see [9]. 

Until recently, it was thought that 0d(x, y, z) was absolutely irreducible 
for the values of = 5 (mod 8). F. Hernando and G. McGuire, with the help 
of MAGMA, found that the polynomial 5^205(2^; Hi factors on F2[x, y, z] [8]. 

In theorem [HI the fact that (02'=+i)0d) = 1 is a necessary condition for 
f{x) not to be exceptional APN. There are many cases when 02^+1 and (pa 
are relatively prime, for example, as we commented, when 0^ is absolutely 
irreducible. In [9], Janwa and Wilson proved, using different methods includ- 
ing Hensel's lemma implemented on a computer, that <f>d{x, y, z) is absolutely 
irreducible for 3 < < 100, provided that d is not a Gold or a Kasami- Welch 
number (in such cases we know that it reduces). It is easy to show that the 
irreducibility of <pd{x, y, z) over F2 also implies that (02^+1) 4'd) = 1- Using all 
this and the previous theorems, we get new infinite families of Gold degree 
polynomial functions that are not exceptional APN. 
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